REMARKS 

Applicant respectfully requests reconsideration and allowance of the 
subject application. Claims 1, 8, 15, 20, 27, 38, and 44 have been amended and a 
new claim 53 has been added. Claims 1-4, 7-8, 15-23, 26-27, 38, 40-44, and 53 
are now pending. 

Applicant's amendments and remarks after Final are appropriate under 
37 C.F.R. §1.116 because they address the Office's remarks in the Final Action, 
and thus could not have been presented earlier. In addition, the amendments and 
remarks should be entered to place the case in better form for appeal. 

35 U.S.C. §103 Claim Rejections 

Claims 1-4, 7, 15-23, 26-27, 38, and 40-44 are rejected under 35 U.S.C. 
§ 103(a) for obviousness over U.S. Patent No. 6,463,474 to Fuh et al. (hereinafter, 
"Fuh"), in view of U.S. Patent No. 6,701,415 to Hendren, III (hereinafter, 
"Hendren") {Office Action p.3). 

Claim 8 is rejected under 35 U.S.C. § 103(a) for obviousness over Fuh in 
view of Hendren, and further in view of U.S. Patent No. 5,940,594 to Ali et al. 
(hereinafter, "Ali") {Office Action p.8). 

Claim 1 recites a domain controller configured to: 

track individual users that request access to the network system via 
the domain controller at the remote network site, the domain 
controller configured to track a user by identifying the remote site 
where the user requests the access, recording a time at which the 
request is made, and monitoring when the network access 
information is cached for the user that requests the access; 
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receive a first network access request from the user and validate the 
first network access request with the network access information 
maintained at the network server when the network access 
information is not cached at the domain controller; 

Support for the amendment to claim 1 can be found at least at pages 8-12 
and at Figs. 1-4 of the Application as filed. 

Fuh does not teach or suggest a domain controller which is configured to 
track individual users who request access to the network system via the domain 
controller, as recited in claim 1 . More specifically, Fuh does not teach or suggest 
a domain controller configured to identify the remote site where a user requests 
the access, to record a time at which the request is made, and to monitor when the 
network access information is cached for the user that requests the access. 

The Office cites to col.2, lines 32-54 of Fuh for tracking individual users. 
This section of Fuh only describes configuring a path through a firewall once a 
user has been authenticated and authorized. This section of Fuh does not describe 
the tracking features recited in claim 1 . Hendren also does not teach or suggest a 
domain controller configured to track individual users who request access to the 
network system via the domain controller, as recited in claim 1. 

In addition, Fuh does not teach or suggest a domain controller configured to 
receive a first network access request from a user and to validate the first network 
access request with the network access information maintained at the network 
server when the network access information is not cached at the domain controller, 
as recited in claim 1 . 

Instead, Fuh describes that when a client submits a request {e.g., an HTTP 
packet), the authentication proxy denies the HTTP packet if the source IP address 
of the packet does not match and the authentication proxy, and makes no attempt 
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at authentication of this first network access request (Fuh col.l 1, lines 28-32). In 
such a situation, Fuh teaches that a new authentication cache can be created for the 
user after the first network access request has been denied. Thereafter, new login 
information (i.e., a second network access request) can be requested from the user, 
and the authentication proxy can then authenticate the client from the new 
authentication cache which was subsequently created (Fuh col.l 1, lines 49-55). 
Fuh does not receive and validate a first network access request from a user client 
unless the authentication proxy (at the firewall/router) has an authentication cache 
from which to authenticate the client. 

Contrary to Fuh, Applicant claims that the domain controller (which is 
remote from the network server) validates the first network access request with the 
network access information maintained at the network server when the network 
access information is not cached at the domain controller, as recited in claim 1. 
The amendment to claim 1 emphasizes that a first network access request is 
validated by the domain controller when the network access information 
corresponding to the requesting user is not currently cached at the domain 
controller. 

Hendren also does not teach or suggest the features recited in claim 1 , nor 
has the Office cited Hendren for the deficiencies of Fuh. Hendren merely 
describes a cache for resources, such as Web pages, and does not provide any 
discussion of network access validation or authentication. 

As such, the Fuh-Hendren combination fails to teach or suggest all of the 
features recited in claim 1. Accordingly, claim 1 is allowable over the 
Fuh-Hendren combination for at least the reasons described above, and Applicant 



lee@hayes 



15 



MS1-678US M02 



respectfully requests that the §103 rejection be withdrawn, and that claim 1 be 
allowed in the Examiner's next action. 

It is axiomatic that any dependent claim which depends from an allowable 
base claim is also allowable. Accordingly claims 2-4 and 7 are allowable by 
virtue of their dependency upon claim 1 . Additionally, some or all of claims 2-4 
and 7 are allowable over the Fuh-Hendren combination for independent reasons. 

Claim 8 recites that "the network server is further configured to replicate a 
partial copy of the user objects from the domain controller such that the replicated 
partial copy of the user objects can be used to identify the network group 
memberships for the individual user." Support for the amendment can be found at 
least at page 7, line 15 to page 8, line 18, and at Figs. 2-4 of the Application as 
filed. 

The Fuh and/or Hendren and/or Ali combination do not teach or suggest a 
network server configured to replicate a partial copy of the user objects from the 
domain controller, as recited in claim 8. Further, claim 8 is allowable by virtue of 
its dependency upon allowable claim 1 as described above in the response to the 
rejection of claim 1 . Accordingly, claim 8 is allowable over the Fuh-Hendren- Ali 
combination and Applicant respectfully requests that the §103 rejection be 
withdrawn. 



Iee@hayes 



16 



MSI-678US M02 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



Claim 15 recites a remote server configured to: 



receive a first network access request from a user and validate the 
first network access request with the network information 
maintained at the global information server when the network 
information corresponding to the user is not cached at the remote 
server; 

track individual users that request access to the network from the 
remote server by identifying the remote server where the user 
requests the access, recording a time at which the request is made, 
and monitoring when the network information is cached for the user 
that requests the access; 

Support for the amendment to claim 15 can be found at least at pages 8-12 
and at Figs. 2-4 of the Application as filed. 

As described above in the response to the rejection of claim 1, Fuh and/or 
Hendren do not teach or suggest a remote server (domain controller) which is 
configured to track individual users who request access to the network system 
from the remote server, as recited in claim 15. Further, Fuh and/or Hendren do not 
teach or suggest a remote server configured to receive a first network access 
request from a user and to validate the first network access request with the 
network access information maintained at the network server when the network 
access information is not currently cached at the domain controller, as recited in 
claim 15. 

As such, the Fuh-Hendren combination fails to teach or suggest all of the 
features recited in claim 15. Accordingly, claim 15 is allowable over the 
Fuh-Hendren combination for at least the reasons described above, and Applicant 
respectfully requests that the §103 rejection be withdrawn, and that claim 15 be 
allowed in the Examiner's next action. 
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Claims 16-19 are allowable by virtue of their dependency upon claim 15. 
Additionally, some or all of claims 16-19 are allowable over the Fuh-Hendren 
combination for independent reasons. 

Claim 20 recites a method comprising: 

validating a first network access request from a user at a second 
network site with the network access information maintained at the 
first network site when the network access information identifying 
the user is not cached at the second network site; and 

tracking individual user requests to access the network from the 
second network site by identifying the second network site where the 
user requests the access, recording a time at which the user requests 
the access, and monitoring when the network access information 

identifying the user is cached for the user making the request. 

i 

Support for the amendment to claim 20 can be found at least at pages 8-12 
and at Figs. 2-4 of the Application as filed. 

As described above in response to the rejection of claim 1, Fuh and/or 
Hendren do not teach or suggest tracking individual users who request access to 
the network system from the second network site, as recited in claim 20. Further, 
Fuh and/or Hendren do not teach or suggest validating a first network access 
request from a user at a second network site with the network access information 
maintained at the first network site when the network access information 
identifying the user is not cached at the second network site, as recited in claim 20. 

As such, the Fuh-Hendren combination fails to teach or suggest all of the 
features recited in claim 20. Accordingly, claim 20 is allowable over the 
Fuh-Hendren combination for at least the reasons described above, and Applicant 
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respectfully requests that the §103 rejection be withdrawn, and that claim 20 be 
allowed in the Examiner's next action. 

Claims 21-23 and 26-27 are allowable by virtue of their dependency upon 
claim 20. Additionally, some or all of claims 21-23 and 26-27 are allowable over 
the Fuh-Hendren combination for independent reasons. 

Claim 38 recites a method comprising: 

validating the first network access request at the remote server with 
the network information maintained at the global information server 
when the network information corresponding to the user is not 
cached at the remote server; 

tracking users that request access to the network via the remote 
server by identifying where the access requests originate and 
recording a time at which the access requests are made; 

Support for the amendment to claim 38 can be found at least at pages 8-12 
and at Figs. 2-4 of the Application as filed. 

As described above in the response to the rejection of claim 1, Fuh and/or 
Hendren do not teach or suggest tracking users that request access to the network 
system from the remote server, as recited in claim 38. Further, Fuh and/or 
Hendren do not teach or suggest validating a first network access request at a 
remote server with network information maintained at the global information 
server when the network information corresponding to the user is not cached at the 
remote server, as recited in claim 38. 

As such, the Fuh-Hendren combination fails to teach or suggest all of the 
features recited in claim 38. Accordingly, claim 38 is allowable over the 
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Fuh-Hendren combination for at least the reasons described above, and Applicant 
respectfully requests that the §103 rejection be withdrawn, and that claim 38 be 
allowed in the Examiner's next action. 

Claims 40-44 are allowable by virtue of their dependency upon claim 38. 
Additionally, some or all of claims 40-44 are allowable over the Fuh-Hendren 
combination for independent reasons. 

New Claim 

New claim 53 is presented for examination, support for which can be found 
at least at page 4, pages 5-12, and at Figs. 1-4 of the Application as originally 
filed. Applicant believes that claim 53 is allowable as presented, and requests 
allowance in the Examiner's next action. 
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Conclusion 

Pending claims 1-4, 7-8, 15-23, 26-27, 38, 40-44, and 53 are in condition 
for allowance. Applicant respectfully requests reconsideration and issuance of the 
subject application. If any issues remain that preclude issuance of this application, 
the Examiner is urged to contact the undersigned attorney before issuing a 
subsequent Action. 



Respectfully Submitted, 



Dated: (YW 13, Qczd 




Lee & Hayes, PLLC 
Reg. No. 42,905 
(509) 324-9256x210 
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